In an unexpected twist during the ongoing conflict in Ukraine, cyber analysts reveal that China has ramped up its hacking operations aimed at Russia. This digital espionage commenced in earnest post the 2022 invasion of Ukraine, posing significant risks to Russian military secrets despite the two nations' professed camaraderie.
China Targets Russia with Cyber Espionage Amid Ukraine War

China Targets Russia with Cyber Espionage Amid Ukraine War
Chinese hacking groups intensify cyberattacks on Russia in search of military intelligence, despite official diplomatic ties.
The attacks reportedly began to surge in May 2022 and have continued unabated. While the public rhetoric between Russian President Vladimir Putin and Chinese President Xi Jinping suggests a bond of friendship, these cyber incursions portray a different reality. Chinese cyber actors see Russia’s military infrastructure as a source of crucial wartime intelligence.
One specific group, operating under the name Sanyo, has been identified for posing as a Russian engineering firm, attempting to gain insights into nuclear submarine technology. Cybersecurity experts from TeamT5 in Taiwan have pointed out that China’s objectives extend beyond mere data theft; they seek knowledge of military strategies and Western weaponry performance in the current theater of conflict.
China’s military, while powerful and resource-rich, has historically been criticized for lacking real combat experience. Analysts speculate that the ongoing conflict in Ukraine presents an unprecedented opportunity for Chinese military strategists to gather actionable intelligence on warfare tactics and defense strategies employed by Russia, as well as Western responses.
However, the extent of these espionage efforts remains ambiguous. Russian authorities have not officially acknowledged the hacking incidents, but leaked information from a confidential document of the F.S.B. (the Russian Federal Security Service) conveys rising concerns regarding Chinese ambitions. In this document, China is labeled an "enemy," further complicating the narrative of bilateral cooperation.
In summary, while formal relations between Russia and China continue to suggest a united front, the ongoing cyberattacks underscore a complex and competitive dynamic that may ultimately alter the strategic balance in the region.
One specific group, operating under the name Sanyo, has been identified for posing as a Russian engineering firm, attempting to gain insights into nuclear submarine technology. Cybersecurity experts from TeamT5 in Taiwan have pointed out that China’s objectives extend beyond mere data theft; they seek knowledge of military strategies and Western weaponry performance in the current theater of conflict.
China’s military, while powerful and resource-rich, has historically been criticized for lacking real combat experience. Analysts speculate that the ongoing conflict in Ukraine presents an unprecedented opportunity for Chinese military strategists to gather actionable intelligence on warfare tactics and defense strategies employed by Russia, as well as Western responses.
However, the extent of these espionage efforts remains ambiguous. Russian authorities have not officially acknowledged the hacking incidents, but leaked information from a confidential document of the F.S.B. (the Russian Federal Security Service) conveys rising concerns regarding Chinese ambitions. In this document, China is labeled an "enemy," further complicating the narrative of bilateral cooperation.
In summary, while formal relations between Russia and China continue to suggest a united front, the ongoing cyberattacks underscore a complex and competitive dynamic that may ultimately alter the strategic balance in the region.